
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e39302e302f32342d3234203d3e20313436383137.roa
File: 3130332e3132302e39302e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: htDM2XXq8wYL8j2JuxGgVOHkJx+7sPIdYQVIlSou0sk=
Subject key identifier: E1:F1:7E:9E:87:12:36:CB:2D:8A:64:0C:11:F9:25:05:3C:F6:B6:80
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 57B7B7BF26AFBD71297672D6F323FBBD6BCF5FA2
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e39302e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:41:55 +0000
ROA not before: Fri 08 May 2026 09:36:55 +0000
ROA not after: Fri 07 May 2027 09:41:55 +0000
asID: 146817
IP address blocks: 103.120.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b7:b7:bf:26:af:bd:71:29:76:72:d6:f3:23:fb:bd:6b:cf:5f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:36:55 2026 GMT
Not After : May 7 09:41:55 2027 GMT
Subject: CN=E1F17E9E871236CB2D8A640C11F925053CF6B680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:ac:7c:68:6c:43:90:36:c3:ff:1c:35:b4:
0c:da:b8:20:df:6d:33:e2:f8:90:ea:1d:25:56:8f:
b9:8e:f6:d3:03:85:1e:41:c4:c7:57:56:32:8f:de:
ef:1e:f5:73:55:59:1d:b3:61:83:eb:3c:72:17:14:
4f:77:33:aa:aa:52:9a:e9:88:e1:1a:c5:18:b0:8e:
4d:61:17:36:5d:92:05:5e:87:58:61:7e:2a:4a:01:
b0:45:64:a9:c8:a5:a9:71:33:98:db:b7:46:fe:8b:
42:32:6b:19:9a:99:0c:62:58:94:7e:f5:de:a3:d8:
5b:31:52:90:32:cc:8b:f4:d6:58:b4:4c:b6:a7:02:
ed:c0:68:ac:32:16:ef:d4:09:db:fd:9c:a1:da:e9:
84:de:a8:e1:75:d6:f4:8a:62:ab:1f:49:ae:32:ce:
24:97:ce:29:a1:b0:b2:b3:27:1e:c6:39:c7:16:f3:
b0:b5:16:43:08:ae:54:7e:db:1c:3b:a3:78:eb:39:
9c:a7:9b:02:5e:1c:55:c1:2f:af:74:9a:06:8b:dd:
07:b7:6d:2b:cb:53:e2:6f:e0:eb:0e:45:a2:bd:ce:
92:36:d5:c0:36:0e:98:c5:7f:70:9a:e1:7e:09:b2:
c9:ae:7e:4f:31:e1:43:45:b3:2a:13:0c:dd:09:62:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F1:7E:9E:87:12:36:CB:2D:8A:64:0C:11:F9:25:05:3C:F6:B6:80
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e39302e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.90.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:dd:64:49:4c:0b:79:69:9f:9a:d0:d8:c5:84:07:cf:c6:f0:
76:40:d7:80:b5:37:cc:30:74:4e:8c:b5:33:46:8c:4d:82:3f:
95:e0:80:35:35:99:47:b2:37:86:2c:30:71:25:ce:10:c9:47:
88:0d:c7:64:69:e5:78:55:62:6a:fd:d7:93:88:8f:da:a4:ac:
6f:31:b6:4d:b0:b8:d1:65:e7:c3:1f:fd:02:46:12:a0:45:24:
79:02:8d:1b:68:75:05:35:c2:e2:09:f4:f7:ad:3e:da:b0:0e:
a8:40:0e:06:32:c4:88:4e:fd:3c:c0:9d:c5:4b:f4:cf:52:c2:
71:e5:6f:d7:99:ff:8e:64:0b:d8:b2:d7:de:43:ca:95:e9:04:
4f:ee:f3:5d:d8:8a:b3:77:9f:0d:4d:71:46:7b:74:56:16:f9:
f9:2c:59:4f:8d:3c:06:f8:be:43:45:f4:46:9e:10:4c:55:83:
b5:51:74:5c:7a:f4:82:67:ef:fc:69:92:64:5b:5d:a6:7a:56:
72:ac:57:b9:e8:86:bb:ad:d8:84:02:9e:1a:e0:83:6a:f8:f0:
e9:7e:ec:9e:f4:6f:b1:d3:38:42:d1:ba:c5:b3:cd:bc:57:df:
3d:f8:ec:5e:f5:54:c1:a9:92:43:76:94:46:40:64:3c:c1:8e:
2d:ec:fd:0e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUV7e3vyavvXEpdnLW8yP7vWvPX6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTM2NTVaFw0yNzA1MDcwOTQxNTVaMDMxMTAvBgNV
BAMTKEUxRjE3RTlFODcxMjM2Q0IyRDhBNjQwQzExRjkyNTA1M0NGNkI2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOKx8aGxDkDbD/xw1tAzauCDf
bTPi+JDqHSVWj7mO9tMDhR5BxMdXVjKP3u8e9XNVWR2zYYPrPHIXFE93M6qqUprp
iOEaxRiwjk1hFzZdkgVeh1hhfipKAbBFZKnIpalxM5jbt0b+i0IyaxmamQxiWJR+
9d6j2FsxUpAyzIv01li0TLanAu3AaKwyFu/UCdv9nKHa6YTeqOF11vSKYqsfSa4y
ziSXzimhsLKzJx7GOccW87C1FkMIrlR+2xw7o3jrOZynmwJeHFXBL690mgaL3Qe3
bSvLU+Jv4OsORaK9zpI21cA2DpjFf3Ca4X4Jssmufk8x4UNFsyoTDN0JYuk1AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU4fF+nocSNsstimQMEfklBTz2toAwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDUwNTgwNzI5NDM5MTkxMTcvMC8zMTMwMzMyZTMx
MzIzMDJlMzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGd4WjANBgkqhkiG9w0BAQsFAAOCAQEA4t1kSUwLeWmfmtDYxYQH
z8bwdkDXgLU3zDB0Toy1M0aMTYI/leCANTWZR7I3hiwwcSXOEMlHiA3HZGnleFVi
av3Xk4iP2qSsbzG2TbC40WXnwx/9AkYSoEUkeQKNG2h1BTXC4gn0960+2rAOqEAO
BjLEiE79PMCdxUv0z1LCceVv15n/jmQL2LLX3kPKlekET+7zXdiKs3efDU1xRnt0
Vhb5+SxZT408Bvi+Q0X0Rp4QTFWDtVF0XHr0gmfv/GmSZFtdpnpWcqxXueiGu63Y
hAKeGuCDavjw6X7snvRvsdM4QtG6xbPNvFffPfjsXvVUwamSQ3aURkBkPMGOLez9
Dg==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:24 2026 by rpki-client